[coreboot] Plans for upcoming Broadwell Thinkpads

[Alexander Couzens]

On Fri, 06 Feb 2015 11:16:48 -0600
Timothy Pearson <tpearson at raptorengineeringinc.com> wrote:

> On 02/06/2015 06:29 AM, Zaolin wrote:
> > Hi,
> >
> > new thinkpad's can't be used anymore for coreboot. Especially the U and
> > Y Intel CPU Series.
> > They come with Intel Boot Guard and you are won't be able to boot
> > anything which is unsigned and
> > not approved by OEM. This means the OEM are fusing SHA256 public key
> > hashes into the southbridge.
> >
> > For more details take a look at Intel Boot Guard architecture. It could
> > be also confirmed by Secunet AG and Google.
> >
> > Regards Zaolin
> 
> That's scary to say the least.  No more Thinkpads for us...
> 

Is it used by Lenovo?
I think I can boot a USB-Linux on a new Thinkpad within a friendly Lenovo Store.
How can it tested? What registers must be read?

Best,
lynxis
-- 
Alexander Couzens

mail: lynxis at fe80.eu
jabber: lynxis at jabber.ccc.de
mobile: +4915123277221
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://www.coreboot.org/pipermail/coreboot/attachments/20150206/ab329a24/attachment.sig>